build: harden workflow permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
This commit is contained in:
parent
fae24d86f5
commit
9074ad93c6
|
@ -18,6 +18,9 @@ on:
|
||||||
- ".github/workflows/cygwin.yml"
|
- ".github/workflows/cygwin.yml"
|
||||||
- "run*tests.py"
|
- "run*tests.py"
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
test:
|
test:
|
||||||
runs-on: windows-latest
|
runs-on: windows-latest
|
||||||
|
|
|
@ -23,6 +23,9 @@ on:
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '0 0 * * 0'
|
- cron: '0 0 * * 0'
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: read
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build:
|
build:
|
||||||
# do not run the weekly scheduled job in a fork
|
# do not run the weekly scheduled job in a fork
|
||||||
|
|
|
@ -19,6 +19,9 @@ on:
|
||||||
types:
|
types:
|
||||||
- published
|
- published
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: write # for release creation (svenstaro/upload-release-action)
|
||||||
|
|
||||||
# This job is copy/paster into wrapdb CI, please update it there when doing any
|
# This job is copy/paster into wrapdb CI, please update it there when doing any
|
||||||
# change here.
|
# change here.
|
||||||
jobs:
|
jobs:
|
||||||
|
|
Loading…
Reference in New Issue